What is LSA Shell?
LSA is a legitimate part of Windows and includes lsass.exe, LSA Shell, LSASS, (Local Security Authority System Service). The Local Security Authority or LSA is a key component of the logon process in WinXP (as well as NT & Win2000). The LSA is responsible for validating users for both local and remote logons. The LSA also maintains the local security policy. During the local (interactive) logon to a machine, a person enters their name and password to the logon dialog. This information is passed to the LSA, which then calls the appropriate authentication package. The password is sent in a nonreversible secret key format using a one-way hash function. The LSA then queries the SAM database for the user's account information. If the key provided matches the one in the SAM, the SAM returns the user's SID and the SIDs of any groups the user belongs to. The LSA then uses these SIDs to generate the security access token.Answer---LSA stands for Local Security Authority, which is an important required component of Windows that deals with login authentication and security policies. You'll see it running on a perfectly clean and valid Windows installation. As I said, it's a required component.